home

setup.x86.en-us_o365homepremretail_adc2b9e2-7143-4ed2-be30-ae715cc85f59_tx_pr_.exe

Microsoft Office

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office

Description:
Microsoft Office Click-to-Run

Version:
15.0.4745.1000

MD5:
912f30625fbc5980982c8aaf2a558ec6

SHA-1:
8adfbe9d1de0639572a1d5c051f6bca308626aea

SHA-256:
0c582bebd918c15fc1a154181579c3111c6ea7ba08305610802d23336973b742

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/27/2024 1:26:02 AM UTC  (today)

File size:
1.1 MB (1,102,520 bytes)

Product version:
15.0.4745.1000

Original file name:
Bootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.x86.en-us_o365homepremretail_adc2b9e2-7143-4ed2-be30-ae715cc85f59_tx_pr_.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 10:42:45 AM

Valid to:
9/4/2016 10:42:45 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
7/13/2015 11:59:09 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
24576:RAdz4S2djzsyPk3Fx1WwYcYX6lPJPP/ssxUG1/LkxjKiNfRW+:RAdz4ScfKZtYXwPdPN3/kNpl

Entry address:
0x5FCFA

Entry point:
E8, 8A, 53, 00, 00, E9, 81, FE, FF, FF, 8B, FF, 55, 8B, EC, 5D, E9, 98, 10, 00, 00, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, 35, E4, 12, 40, 00, 57, FF, 35, 68, 94, 4E, 00, FF, D6, FF, 35, 64, 94, 4E, 00, 8B, D8, 89, 5D, FC, FF, D6, 8B, F0, 3B, F3, 0F, 82, 81, 00, 00, 00, 8B, FE, 2B, FB, 8D, 47, 04, 83, F8, 04, 72, 75, 53, E8, B4, 54, 00, 00, 8B, D8, 8D, 47, 04, 59, 3B, D8, 73, 48, B8, 00, 08, 00, 00, 3B, D8, 73, 02, 8B, C3, 03, C3, 3B, C3, 72, 0F, 50, FF, 75, FC, E8, 42, 54, 00, 00, 59, 59, 85, C0, 75, 16, 8D...
 
[+]

Entropy:
6.1762

Code size:
886 KB (907,264 bytes)

The file setup.x86.en-us_o365homepremretail_adc2b9e2-7143-4ed2-be30-ae715cc85f59_tx_pr_.exe has been seen being distributed by the following 50 URLs.

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=effa96e1-4cee-4e2e-9988-88895cffeab8&token=1e5b9ae3-0ca9-420d-99b1-f8a46f24ffea&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=0783a0d9-97b8-4b0a-bf33-1ba9387c34e2&token=a66a29ef-0d9d-4f31-a525-a3200ad9025c&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0dce5958-fa55-4433-bca1-3d9156eee6f8&token=8c7f9d94-cf08-4793-bcda-5889dd5a1e6a&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=208126a3-c58c-4c3e-b378-bd7d4a9b3048&token=fdf126c3-5cf5-48ef-806b-608aad6ab38a&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=f3034075-9d26-4844-be47-55b8b69dfbee&token=be3da149-3126-4aa8-ba9c-86b525a5c05a&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=3250bd20-ab16-4ea1-8ee7-d75024efe6ec&token=78efe4c8-c4b8-49c3-9c07-dccef09270dc&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=b7a92d85-9585-4bf8-82a7-c5473ad752bc&token=22a3252f-0952-4012-bb6d-09e339b9d791&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=8fb500a8-7cc6-4666-9ac2-e46ff3b1ee69&token=38292e56-3dee-4e6b-a25b-2b70211bbddd&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=07f517c8-1792-4968-973c-442ed7ac75d6&token=686b98a4-b1a7-474b-b198-bc1cc896495a&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=afc7db60-e25e-4119-ac43-01670bf120b8&token=3f5c2150-9fc0-4258-945f-39fc201e7f42&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ce1d4713-e334-410c-b9bb-7d630a8efeea&token=545b0eb6-029f-4c23-9e1c-58def2df4ce4&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=ef15fa3a-25de-4460-aa39-9a1f0757b09f&token=1edca5ed-32ed-437d-a072-a1631209305a&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=71dd4c47-638e-4480-9e90-c32ce007af19&token=b9ca2e1e-4463-48af-9d35-1ccbc08835b0&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=7afe0dc7-b6db-4587-9292-705fdd62c1a7&token=0e93c2e5-98dd-45f5-92df-4c70780896e7&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=db&correlationId=a1bf9833-1749-4c15-99dd-e04fc894e6bc&token=4424d795-a880-40f6-896b-cc1e073eef35&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=0bcaea74-ef48-46b8-8f62-eaa6d93ceac7&token=015b70f8-f0bc-42d7-9295-3fda4892a126&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=77499181-c799-4d87-a55b-8c0a58d11217&token=a28a16c3-adcf-4adc-adff-52c9b6c86a84&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=047a5bb0-7240-45a4-800d-10edfae5a6be&token=f5ce1356-e81e-4fdd-a325-f56eb57f3045&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5889c669-8987-4e48-8c18-cacfdf292f57&token=30e1ebdc-807f-458a-9348-c344a9dd8c0e&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=465abe5f-ea66-4932-8776-a62387ecfdea&token=9891eb08-297e-4eee-98f6-737d4f1c7210&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=5811e13c-c8bc-4516-9387-469584091c87&token=9e9db247-634b-40d9-9de9-d8353842d3bd&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c90ad38f-7ef5-4c7d-bd2d-8acee356f9ee&token=0d010b74-764d-4a28-b4b9-e8b39bad5201&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=b59a22db-c450-462b-8175-529eb50ba2cd&token=5666a188-68a2-4590-9dba-b6e4c2262c1e&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c1d8d359-0f8f-41b4-a032-a4027db92694&token=6c8a24c6-2222-424f-84e3-dbec8198f475&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=f34a7c98-ba86-42bd-a6ab-1bfdea75db81&token=256fb6d1-8b3a-4856-aed7-a80a4f3dc850&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=sg&correlationId=7709435b-fd86-4c2f-a5a7-25c87fdea99c&token=b5cb271a-d607-4b15-a9f5-9c5b788cf8cd&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=a9c9f642-cee2-49f0-a3b6-97ba58408bad&token=6663041d-6b3c-43f8-b033-9d59b260f640&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=c57649b2-bfe0-4b11-843f-52c9b2219807&token=71b77fe4-fd13-45e6-a5fa-642c83f156a0&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=dcff1201-8744-4976-8429-43651f5cf671&token=d4ccf201-a28a-4d1b-ab3d-08861bccb05c&version=O15GA&source=O15OLSOMEX

https://c2rsetup.officeapps.live.com/.../download.aspx?productReleaseID=O365HomePremRetail&platform=X86&language=en-US&TaxRegion=pr&correlationId=274a2a0a-6ace-48de-82c9-d3d422151f6d&token=bd184e4b-1b51-4589-9f6f-46cb7fc04278&version=O15GA&source=O15OLSOMEX

Latest 30 of 1,933 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.